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Claims 



1. 



(Original) A method for authenticating a first terminal to a second terminal 



composing: 

requesting a string from the second terminal; 

obtaining the requested string from the second terminal; 

merging the obtained string with a password to create an identification code; 

receiving an authentication if the identification code matches an identification code expected 
at the second terminal; 

sending information from an information server to the first terminal. 



2. (Original) The method of Claim 1, wherein the string is a pseudo random number 



sequence. 



3. (Original) The method of Claim 1, wherein the string is an element of an ordered 



senes. 
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4. 



(Currently amended) Th e m e thod of Claim 1, A method for authenticating a first 



terminal to a second terminal comprising: 

requesting a string from the second terminal; 
obtaining the requested string from the second terminal; 

merging the obtained string with a password to create an identification code, wherein 
merging the string comprises merging the string with the password using an applet at the first 
terminal, the applet executing an encryption algorithm with a unique merging key; 

receiving an authentication if the identification code matches an identification code expected 
at the second terminal; 

sending information from an information server to the first terminal . 

5. (Original) The method of Claim 1, wherein merging the string comprises performing 
a block addition of the string and the password. 

6. (Original) The method of Claim 5, wherein performing a block addition further 
comprises performing a permutation to the string and to the password and adding the permutated 
string and the permutated password. 
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7. (Currently amended) Th e m e thod of Claiml, A method for authenticating a first 
terminal to a second terminal comprising: 

requesting a string from the second terminal: 

obtaining the requested string from the second terminal wherein obtaining the requested 
string comprises receiving a web page containing a program for generating requests and the string; 

merging the obtained string with a password to create an identification code; 

receiving an authentication if the identification code matches an identification code expected 
at the second terminal; 

sending information from an information server to the first terminal . 

8. (Original) The method of Claim 7, wherein the web page is an HTML page and the 
program is an applet. 

9. (Currently amended) The method of Claim 4 [[1]], further comprising closing the 
applet after sending the encrypted data and thereby invalidating the string. 

10. (Original) The method of Claim 1, further comprising opening another 
communications session using a string that is an element of an ordered series and wherein the string 
of the prior communications session is the preceding element of the same ordered series. 



Page 4 of 18 




AttorneyReference Number 101 1-64561 
Application Number 09/767,617 



JDW:aeh 03/18/04 252019.doc 
PATENT 



1 1 . (Currently amended) A method for authenticating a first terminal to a second terminal 
comprising: 

creating a string and storing it in association with an identification of a first terminal; 
sending the string to the first terminal; 

receiving an identification code from the first terminal composed by merging the sent string 
with a sender password; 

comparing the identification code to an expected identification code; 

if the identification code matched an expected identification code, then authenticating the 
first terminal[[;]]. 

12. (Original) The method of Claim 11, wherein the string is a pseudo random number 
sequence. 

13. (Original) The method of Claim 11, wherein the string is an element of an ordered 

series. 
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14. (Currently amended) Th e m e thod of Claim 1 1 , A method for authenticating a first 
terminal to a second terminal comprising: 

creating a string and storing it in association with an identification of a first terminal; 
sending the string to the first terminal; 

receiving an identification code from the first terminal composed by merging the sent string 
with a sender password, wherein merging the string comprises merging the string with the password 
using an applet at the first terminal s e nd e r , the applet executing an encryption algorithm with a 
unique merging key; 

comparing the identification code to an expected identification code; 

if the identification code matched an expected identification code, then authenticating the 
first terminal 

15. (Original) The method of Claim 11, wherein merging the string comprises performing 
a block addition of the string and the password. 

16. (Original) The method of Claim 15, wherein performing a block addition further 
comprises performing a permutation to the string and to the password and adding the permutated 
string and the permutated password. 
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1 7 . (Currently amended) Th e m e thod of Claim 11, A method for authenticating a first 
terminal to a second terminal comprising: 

creating a string and storing it in association with an identification of a first terminal: 

sending the string to the first terminal, wherein obtaining sending the r e qu e st e d string 
comprises sending r e c e iving a web page containing a program for generating requests and the string; 

receiving an identification code from the first terminal composed by merging the sent string 
with a sender password; 

comparing the identification code to an expected identification code; 

if the identification code matched an expected identification code, then authenticating the 
first terminal . 

18. (Original) The method of Claim 17, wherein the web page is an HTML page and the 
program is an applet. 



19. (Currently amended) The method of Claim 14 [[11]], further comprising closing the 
applet after sending the encrypted data and thereby invalidating the string. 

20. (Original) The method of Claim 1 1 , further comprising opening another 
communications session using a string that is an element of an ordered series and wherein the string 
of the prior communications session is the preceding element of the same ordered series. 
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2 1 . (Currently amended) An authentication terminal comprising: 

a merge string library coupled to a processor to create a merge string and to store it in 
association with an identification of a second terminal; 

an output device to send the merge string to the second terminal; 

an input device to receive an identification code from the second terminal, the identification 
code[[,]] being composed [[be]] by merging the sent string with a second terminal password; and 

an identification test library coupled to the processor to compare the identification code to an 
expected identification code and if the identification code matches an expected identification code, 
to authenticate the second terminal 

22. (Original) The terminal of Claim 21, wherein the string is an element of an ordered 

series. 
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23. (Currently amended) Th e t e rminal of Claim 21, An authentication terminal 
comprising: 

a merge string library coupled to a processor to create a merge string and to store it in 
association with an identification of a second terminal; 

an output device to send the merge string to the second terminal; 

an input device to receive an identification code from the second terminal the identification 
code, being composed be merging the sent string with a second terminal password; 

an identification test library coupled to the processor to compare the identification code to an 
expected identification code and if the identification code matches an expected identification code, 
to authenticate the second terminal; and 

furth e r comprising an encryption library coupled to the processor to generate the expected 
identification code by merging the string with the second terminal password using an encryption 
algorithm with a merging key unique to the second terminal. 
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24. (Currently amended) Th e t e rminal of Claim 21, An authentication terminal 
comprising: 

a merge string library coupled to a processor to create a merge string and to store it in 
association with an identification of a second terminal; 

an output device to send the merge string to the second terminal; 

an input device to receive an identification code from the second terminal the identification 
code being composed by merging the sent string with a second terminal password, wherein the 
terminal is a web server, wherein the input device and the output device communicate over the web 
and wherein the terminal transmits a web page to the second terminal containing a program for 
merging the second terminal user password and the merge strin g; and 

an identification test library coupled to the processor to compare the identification code to an 
expected identification code and if the identification code matches an expected identification code, 
to authenticate the second terminal. 
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